The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql15 | Jul 5, 2019 | Jun 26, 2019 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-server | Sep 9, 2020 | Jun 26, 2019 |
| Freebsd | — | Upgrade postgresql10-serverUpgrade postgresql11-server | Jun 27, 2019 | Jun 27, 2019 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Mar 13, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql | Aug 28, 2019 | Jun 26, 2019 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-staticUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-pltcl | Sep 10, 2020 | Jun 20, 2019 |
| Postgres | — | Upgrade to PostgreSQL version 11.4 | Jun 21, 2019 | Jun 21, 2019 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contrib | Sep 9, 2020 | Jun 26, 2019 |
| Suse | — | Upgrade postgresql10-plperlUpgrade libpq5-32bitUpgrade postgresql-docsUpgrade postgresql10-testUpgrade postgresql12-develUpgrade postgresql12-docsUpgrade postgresql12-plpythonUpgrade postgresql10-serverUpgrade libecpg6-32bitUpgrade postgresql12-server-develUpgrade postgresql12-serverUpgrade postgresqlUpgrade postgresql12-contribUpgrade postgresql12-pltclUpgrade postgresql-serverUpgrade postgresql12-plperlUpgrade postgresql-contribUpgrade postgresql10-docsUpgrade python3-psycopg2Upgrade libpq5Upgrade postgresql10-develUpgrade postgresql10-pltclUpgrade postgresql10Upgrade postgresql10-plpythonUpgrade postgresql-server-develUpgrade postgresql10-contribUpgrade postgresql-plpythonUpgrade postgresql12Upgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade libecpg6 | Jul 10, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade postgresql-11Upgrade postgresql-10 | Jun 21, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub